CVE-2021-1108: Integer Underflow
Published Aug 11, 2021
·Updated
NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation may lead to complete denial of service, partial integrity, and serious confidentiality loss for all processes in the system.
Affected Software
10 affected components
Nvidia Jetson Linux>=32.1<32.6.1
Nvidia Jetson AGX Xavier
Nvidia Jetson Nano
Nvidia Jetson Nano 2gb
Nvidia Jetson TX1
Nvidia Jetson TX2
Nvidia Jetson Tx2 Nx
Nvidia Jetson Xavier NX
Nvidia Shield Experience<9.0
Nvidia Shield TV
Event History
Aug 11, 2021
CVE Published
via MITRE·09:33 PM
Data Sourced
via MITRE·09:33 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this NVIDIA Linux kernel vulnerability?
The vulnerability ID for this NVIDIA Linux kernel vulnerability is CVE-2021-1108.
2
What is the severity level of CVE-2021-1108?
The severity level of CVE-2021-1108 is high (7.3).
3
Which software versions are affected by CVE-2021-1108?
NVIDIA Jetson Linux versions from 32.1 to 32.6.1 are affected by CVE-2021-1108.
4
What is the impact of CVE-2021-1108?
CVE-2021-1108 may lead to complete denial of service, partial integrity, and serious confidentiality loss for all processes in the system.
5
Are NVIDIA Jetson AGX Xavier and NVIDIA Jetson Nano vulnerable to CVE-2021-1108?
No, NVIDIA Jetson AGX Xavier and NVIDIA Jetson Nano are not vulnerable to CVE-2021-1108.